$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa File: a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa (raw, json) Hash identifier: 7HxhQvDyab1cZCe3pGZ9ojd4tGco38PFqeMj3Nvmd6E= Subject key identifier: 63:E0:CF:24:7D:D0:AE:F5:73:89:5D:75:61:D7:7F:D8:E1:82:B8:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5541D4D16A40EAEB4507267393B66520CE620355 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa Signing time: Fri 15 May 2026 02:00:49 +0000 ROA not before: Fri 15 May 2026 02:00:49 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.136.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:41:d4:d1:6a:40:ea:eb:45:07:26:73:93:b6:65:20:ce:62:03:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 02:00:49 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=e9b2eb32799d5310eb0026e306bd8cda9e213db9cd97192db7ca14922077628a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:cb:20:ce:fa:8c:0c:98:0f:60:4c:e6:dc: 48:17:3a:d1:9b:b7:f3:8b:a0:49:62:7e:cc:af:45: 0b:38:49:26:ca:46:34:fe:95:18:ef:13:33:31:d5: 67:22:e2:5f:d4:47:f9:19:7d:62:e3:f6:0f:7c:1e: a3:f9:66:83:57:9b:72:98:af:7f:8d:0e:f3:1e:a2: 80:e4:3e:61:0c:17:41:cb:bb:13:0d:7c:18:62:2c: 8c:c9:68:f5:fd:90:28:2b:7d:aa:59:20:b8:a6:c0: ab:0f:32:d6:8e:ba:b7:51:bd:94:48:93:16:0b:b8: ca:ff:ad:07:62:98:16:63:11:82:4c:28:68:f7:f8: 42:ae:66:5f:08:4d:86:6d:54:b0:14:f4:61:3d:b7: aa:d9:c9:5a:b8:51:44:e8:bc:a9:f5:66:04:cf:e9: 9a:e7:c9:47:8a:8f:d8:be:23:7c:de:08:5a:73:ad: 9b:21:5a:71:84:ac:b0:e3:a7:38:96:81:a3:9b:03: 1c:67:aa:9e:e2:59:87:65:40:ad:84:7a:9a:88:9e: a5:da:31:fa:3e:1a:35:24:10:21:54:fd:7a:52:04: 30:5b:55:b8:e9:3e:1c:5e:13:78:9d:53:e4:ff:0f: 4f:32:18:32:2d:5c:89:c1:cc:d4:28:77:44:0b:50: 9d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:CF:24:7D:D0:AE:F5:73:89:5D:75:61:D7:7F:D8:E1:82:B8:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.136.1.0/24 Signature Algorithm: sha256WithRSAEncryption 64:38:ff:dc:67:07:69:e5:24:15:1d:f2:2b:b9:21:d0:89:d2: b1:fc:8f:28:83:d3:b5:30:1a:b0:51:aa:fb:77:92:04:a3:4b: fc:ed:45:91:d5:d1:b9:e0:cb:44:76:35:31:33:60:8a:df:c5: f5:6e:6b:37:21:db:85:48:03:1f:21:c2:83:d1:57:11:90:d6: ca:35:01:2c:6e:d7:f0:ca:fd:15:84:ac:76:6f:30:7f:80:a7: ac:db:e6:6e:5a:39:1d:3c:01:14:85:3a:12:6c:18:ec:52:5c: 77:2d:2e:42:e1:c9:55:50:40:09:4c:c6:f0:f1:51:df:00:b7: a1:73:b6:ac:ef:e2:24:3c:0f:76:9f:69:7a:d0:bb:2d:26:db: d7:4b:cb:78:bd:3c:ad:84:c5:d6:1d:bb:b0:20:3a:44:46:a4: 5e:03:ad:76:4c:41:db:c8:a6:79:c5:d4:40:07:f4:6f:53:e0: aa:a3:58:77:9e:0a:f2:01:b9:46:41:82:38:6b:0b:21:cf:cd: 48:71:b3:e5:d4:7c:0b:e5:da:d3:65:3f:80:e4:de:6e:0e:dc: cb:dc:86:e3:d0:00:d5:e8:04:ba:50:d4:bd:c4:e2:59:cb:b1: 00:47:f4:44:64:a3:ee:56:47:c4:80:9f:bb:39:b6:8c:e8:e3: 76:2e:ae:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVUHU0WpA6utFByZzk7ZlIM5iA1UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIwMDQ5WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWIyZWIzMjc5OWQ1MzEwZWIwMDI2ZTMwNmJkOGNkYTll MjEzZGI5Y2Q5NzE5MmRiN2NhMTQ5MjIwNzc2MjhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9gMsgzvqMDJgPYEzm3EgXOtGbt/OLoElifsyvRQs4SSbK RjT+lRjvEzMx1Wci4l/UR/kZfWLj9g98HqP5ZoNXm3KYr3+NDvMeooDkPmEMF0HL uxMNfBhiLIzJaPX9kCgrfapZILimwKsPMtaOurdRvZRIkxYLuMr/rQdimBZjEYJM KGj3+EKuZl8ITYZtVLAU9GE9t6rZyVq4UUTovKn1ZgTP6ZrnyUeKj9i+I3zeCFpz rZshWnGErLDjpziWgaObAxxnqp7iWYdlQK2EepqInqXaMfo+GjUkECFU/XpSBDBb VbjpPhxeE3idU+T/D08yGDItXInBzNQod0QLUJ3PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY+DPJH3QrvVziV11Ydd/2OGCuN8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExYTVkZDdiLTFiMmYtNDg3Mi05ZGU1LTM3ZDJiNDY4OWQxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABsiAEwDQYJKoZIhvcNAQELBQADggEBAGQ4/9xnB2nlJBUd8iu5IdCJ0rH8 jyiD07UwGrBRqvt3kgSjS/ztRZHV0bngy0R2NTEzYIrfxfVuazch24VIAx8hwoPR VxGQ1so1ASxu1/DK/RWErHZvMH+Ap6zb5m5aOR08ARSFOhJsGOxSXHctLkLhyVVQ QAlMxvDxUd8At6Fztqzv4iQ8D3afaXrQuy0m29dLy3i9PK2ExdYdu7AgOkRGpF4D rXZMQdvIpnnF1EAH9G9T4KqjWHeeCvIBuUZBgjhrCyHPzUhxs+XUfAvl2tNlP4Dk 3m4O3MvchuPQANXoBLpQ1L3E4lnLsQBH9ERko+5WR8SAn7s5tozo43YurhY= -----END CERTIFICATE-----Generated at Sat Jun 13 08:16:58 2026 by rpki-client